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(57) Abstract 

The present invention relates to a method and apparatus for authenticating communications in telecommunications networks. The 
method comprises the steps of storing authentication data and user interface identification data in an authentication server such that the 
identification data is bound with associated authentication data. An identification data of a communicating user interface is transmitted to 
the authentication server, whereafter the identification data is received in the authentication server. Such authentication data is retrieved 
from the stored authentication data which is bound to the received identification data. At least a part of the retrieved authentication data is 
then transmitted from the authentication server as a response to the received identification data. 
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METHOD, ARRANGEMENT AND APPARATUS FOR AUTHENTICATION 



F TPT.n dp tob Tm^WTTOW 

The present invention relates to methods for authentication 
in telecommunication networks. The invention relates 
further to an arrangement for accomplishing authentication 
operations in telecommunication networks and to an 
apparatus for use in authentication. 

ttarKT,T?OTTT vm nv THR TNVENTTON 

There are various types of communication applications 
and/or proceedings and/or services which are implemented 
through a telecommunication network (or several networks) 
and which require at least some kind of authentication. The^ 
authentication may be required e.g. when a user is 
accessing a specific application through a 

telecommunications network so as to ensure the user's right 
for the access. In addition, when a user is already using 
an application through a communications network, there may 
arise a need for verifying the user's, right to use the 
application and/or the user's right to make some further 
proceedings, such as reconfiguration or reprogramming or 
updating operations, during the use, or to receive an 
acknowledgment from the user so as to allow the. application 
to make some further proceedings, such as to retrieve or 
transfer information from the application or an associated 
database/record or to configure the application or 
information contained in an application database. 

Examples of applications which might require an 
authentication include various commercial and noncommercial 
services and/or databases or records obtained through 
packet switched communications networks, such as Internet, 
Intranet or Local Area Networks (LAN) - The examples include 
also applications such as payment services and banking 
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services accessed through packet switched communications 
networks. The examples of the applications include also 
proceedings such as resource access, remote programming or 
reprogramming, or reconfiguring, updating or maintenance of 
5 software and/or databases through a communications network, 
as well as transmitting of confidential files and records 
etc. proceedings accomplished through a communications 
network. As already referred to, even some of the free of 
charge services obtained through communications networks 
10 may require an authentication. 

The amount of applications which require at least a some 
degree of authentication of the user who and/or terminal 
which is trying to access "the application or of a user who 

15 and/or a terminal which is already using them, but needs to 
be authenticated or checked during the use of the 
application or needs to acknowledge something during the 
use of the application, has increased heavily during the 
past years. A need for a secure and reliable authentication 

20 is also expected to increase further in the future. 

The present data communications systems may utilize special 
keys or electronic signatures (electrically implemented 
signings) for authentication of the use thereof. From these 
25 the keys are used in the communication authenticity 

proceedings together with various cryptographic techniques 
and/or algorithms between two communicating data processing 
devices or computer devices and/or servers and/or nodes 
etc. data communication equipment. 

30 

According to one scenario a random challenge is given to 
encryption functions of the two computer devices. Both of 
these computers have a secret, i.e. an encryption key, 
which is also given to the encryption/decryption functions 
35 in both of the computers. Thereafter the results of the 

calculations of the two encryption functions are compared, 
and if the result of the comparison is positive, the 
authenticity is considered as being in force, and if the 
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comparison gives a negative result, then the authenticity" 
test is considered as being failed. 

In most cases the keys are public or private keys. In a 
5 public key method a user can be identified by means of a 

key (for instance a password) . The user and the application 
• : can use the public key for encrypting of data. In a private 
key method the key is usually known by the user only. The 
user can thus be identified only in case the key is shared 
10 between the user and the application (so called shared 
secret) . In most cases the private key can therefore be 
used only for decrypting of encrypted data, whereas the 
shared secret key can be used both for the encryption and 
decryption operations* 

15 

In addition, the keys can be symmetric or asymmetric 
relative to the time. However, the use of asymmetric keys 
during a connection can make the running of the 
authentication arrangement too heavy. Thus an asymmetric 
20 key (or keys) is usually used only when making up a 

connection, and a symmetric key (or symmetric keys) is then 
used for the connection itself. 

The electronic or digital signature is a block of data that 
25 has been created by using some secret key. A public key can 
; : - be used to verify that the signature was really generated 
by using a corresponding secret key. The algorithm used to 
generate the signature must be such that it is impossible 
to create or guess such a signature that could be verified 
30 as a valid signature without a knowledge of the actual 
secret key. 

To give a better understanding of the background, some of 
the terms of the art are explained in more detail with a 
35 brief description of some of the drawbacks thereof: 

A user identity (ID) . Each of the users is having a 
user identity (ID) , which is also sometimes referred to as 
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a username. The user usually creates the ID by himself, and 
it may, for instance, be formed of the initials, the first 
name and/or the surname of the user, his/hers nickname or 
similarly. Thus the user IDs do not provide any proper and 
5 reliable security against unauthorized or illegal use of 
them. An ID can be used by anybody instead of the actual 
owner thereof. 

A password. At the present the use of a password or 
10 several passwords together with the user ID is the most 

often used approach for the authentication. The password is 
given to the remote application through a user interface, 
e.g. through a computer terminal connected to a 
communications network. However, this solution does not 
15 take the vulnerability of the network into account, since 
the password is exposed to everyone who has an access to 
the network (and who is skilled enough to read the 
passwords from the message) . 

20 - A secret . The secret may be described as an electronic 
password or a signature or an encryption key which is 
stored and used by e.g. a user interface. Even though the 
secret is not revealed to the network, it may end into 
"wrong hands " and could be used by some other party than 

25 those who are originally intended to be the users of the 
secret. 

An authentication software in a user interface. This is 
a more sophisticated approach for the authentication. A 

30 password code is given to a program in the user interface, 
which then automatically authenticates in a cryptographic 
manner the access to the requested application. Even though 
this provides a more secure arrangement than the above 
solutions, it still leaves a possibility for catching the 

35 secret passwords from the user interface. It is also 

possible to modify the software without a notice to the 
actual user. 
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The above already mentions some parties which may be 
involved when implementing the present authentication 
systems. They are also briefly explained in the following: 

A user is usually a human being i.e. a real person who 
uses various applications or services through a 
telecommunications network or several networks connected to 
each other. The user can be identified by means of a user 
ID together with a key (a password or a secret) which is 
only known by him/her (a public key method) , or by means of 
a key which is shared between the user and the application 
(a shared secret key method) . 



An application is a party that wants to ensure the 
authenticity of the user. The application can also be' 
called as a service. From the application 1 s point of view 
the authenticity question can be divided in four different 
categories (questions) : 
20 1) is the user at the moment in the other end? (so 

called peer-entity-authentication) , 

2) are the further messages and communication received 
from the same user? (integrity of the message stream) , 

3) does a specific message and communication originate 
25 from a certain user? (data origin authentication) , and 

4) is the message and communication such that even a 
third party may believe it to originate from a certain 

W user? (non-repudiation) . 



A user interface is a device or an arrangement which 
enables the user to access the application. In most 
instances it can also be referred to as a terminal, and may 
consist. of a computer (e.g. Personal Computer, PC), a 
workstation, a telephone terminal, a mobile station, such 
as a mobile telephone or a radio or a pager or a 
combination of a mobile telephone and a data processing 
device, an automatic money teller and/or banking machine, 
etc. The user interface provides input/output facilities 
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and it may possibly even provide a part of the application. 

A key server is a server which contains all keys and 
signatures of different users of a communications network. 
5 In the present systems the key server is located in the 
global and open connectionless Internet network, and is 
thus accessible by all those users who are having access to 
the Internet . The present key servers are arranged to 
respond to key queries sent by the users of the Internet . 

10 Usually the procedure is such that the user of the Internet 
gives the name (or ID) of the other party, and thereafter 
the key server retrieves a key from a database thereof and 
sends this key as a response to the user. The information 
contained by an individual key server can be updated either 

15 by anybody who is capable of using the Internet or only by 
the owner of the server, in case the access to the key 
server is limited to this. 

ST7MMARV OP T WR TNWNTTON 

20 

A problem with the present systems is that the used 
communications system and the users thereof have to trust 
that the user initially gave a correct user identity (ID) 
to the system, e.g. to a key server. In addition, the 
25 information stored in the database of an Internet key 

server can be changed by a third party, and thus these open 
databases are not kept secure e.g. against hackers. 

To improve the security, certified key servers are 
30 introduced and used instead of the conventional uncertified 
key servers. The certified key server will not accept the 
key of the user over the packet switched communications 
network, but the user must give the key to the 
administrator of the certified key server by a n hand-in- 
35 hand method" . This, however, makes the use thereof more 
complicated and many of the users feel it uncomfortable, 
and thus do not want to use them. 
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Therefore the present key servers are utilized such that 
the user downloads with a ftp (file transfer protocol) a 
key. The system (e.g. the used application) has to trust, 
5 in addition to the correctness of the given user ID, that 
nobody has changed the original key either. 

The electronic signatures cannot be trusted either since 
there is no absolute certainty of the correctness of the 

10 electronic keys allocated in a key server. The 

users/systems have to trust that the user gave a correct 
user identity. The electronic signatures are also 
vulnerable to hackers or similar intruders. For example, in 
the Internet environment these can be easily configured for 

15 every user, and anybody can change the public keys if . 
he/she wants to do this. 

Another problem of the electronic keys/signatures is that 
they require complex authentication programs. And still 

20 there is no absolute certainty of the correctness or origin 
of the keys or signatures. In case the access to the 
application is made as secure as possible by the prior art 
solutions, the application easily becomes extremely complex 
from the architecture thereof, and becomes also complicated 

25 and more time consuming to access and use. 

In case the security level will be increased, the amount of 
the required hardware and software is also increased, which 
leads to an increased need for maintenance and updating 

30 thereof, and thus the total costs of the authentication may 
become essentially high. In addition, it is believed that a 
condition called as "absolutely secure" does not even exist 
in the. present open communications networks, as the 
technical development makes it possible e.g. for the 

35 hackers to solve even the more complicated ones of the 
present security arrangements . 
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A human problem lies on the fact that the keys or 
signatures may become quite complicated and/or too long, or 
that there may be too many of them for a user to handle and 
remember all of them correctly. Typically a key which is 
5 considered as secure in the secret key method is 128 bits 
or longer and in the public/private key method a secure key 
is considered to be 1024 bits or longer. For the most of 
the people it is impossible to remember this kind of keys. 

10 In addition to the possibility of catching the electronic 
key or signature or password during its transmission over 
an open packet switched communications network, as was 
discussed above, today's solutions do not sufficiently pay 
attention to the vulnerability of the user interfaces 

15 either. The terminal devices used to form the interfaces 
have developed to be full of complex technology and 
software such that most of the users are no longer capable 
of fully controlling the terminals , or even understanding 
the operation thereof. In addition, it often occurs that 

20 many users share the same terminal device (e.g. the 

terminal is a commonly used PC) and/or that some external 
maintenance personnel has an access to the computers of a 
per se closed organization. 

25 The computer terminals contain stored state and programs in 
the memory means thereof, which can be modified. In the 
modern computers it is possible to modify the software 
thereof even such that the user does not notice this, and 
even through the communication paths without any physical 

30 access to the device itself. To give an example of the 
risks, it is possible to modify a program in a computer 
terminal such that it modifies the data the user sends e.g. 
to a bank, e.g. such that the computer modifies all bank 
transfers in a certain day to another account than what was 

35 designated by the user. This modifying or reprogramming 
without a notice may cause serious and huge damages when 
used against ordinary individual users, and especially when 
used against organizations such as companies or public 
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administration. This all means that the ordinary terminal 
devices and communication paths cannot be trusted. 

Therefore it is an object of the present invention to 
overcome the disadvantages of the prior art solutions and 
to provide a new type of solution for authentication. 

An object is to provide a method and an arrangement by 
means of which a user interface accessing an application 
can be authenticated in a more secure manner than what has 
been possible in the prior art. A further object is to 
provide a more secure authentication when a. need for the 
authentication arises during the use of an already accessed 
application. 

An object is to provide a solution in which the application 
can be certain that the user identity and the. 
authentication data, such as a key or signature, are 
correct . 



An object of the present invention is to provide a solution 
in which a telephone subscription number,, an identification 
module of a mobile station or a mobile equipment identity 
or identity provided by a smart card or similar means can 
25 be utilized in the authentication. 

An object is to provide a solution by means of which data 
encryption procedures between the communicating parties can 
be realized in a novel and improved manner. 



The objects are obtained by a method of authenticating 
communications in telecommunications networks, wherein the 
method comprises storing authentication data in. an 
authentication server, storing a user interface 
identification data in the authentication server, such that 
it is bound with the associated authentication data, 
transmitting an identification data of a communicating user 
interface to the authentication server, receiving the 
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identification data in the authentication server, 
retrieving such authentication data from the stored 
authentication data which is bound to the received 
identification data, and transmitting at least a part of 
5 the retrieved authentication data from the authentication 
server as a response to the received identification data. 

According to an alternative the method of authenticating 
communications in telecommunications networks comprises the 

10 storing authentication data in an authentication server, 
storing a user interface identification data in the 
authentication server such that it is bound with the 
associated authentication data, transmitting an 
authentication data for a communicating user interface to 

15 the authentication server, receiving the authentication 
data in the authentication server, retrieving such user 
interface identification data from the stored user 
interface identification data which is bound to the 
received authentication data, and transmitting at least a 

20 part of the retrieved user interface identification data 
from the authentication server as a response to the 
received authentication data. 



In addition, the invention provides an arrangement for use 
in telecommunications networks. The arrangement comprises a 
user interface connected to a first telecommunications 
network, said user interface having an identification, an 
application accessible through a second telecommunications 
network, an access server enabling the user interface to 
access the second telecommunications network through the 
first telecommunications network, and an authentication 
server, wherein the authentication server comprises a 
record or a database in which the identification of the 
user interface and a corresponding authentication data are 
stored in a retrievable manner and such that they are bound 
together. 
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An authentication server for use in telecommunications 
networks is also provided. The authentication server 
comprises a database or record for storing a user interface 
identification data for a user interface terminal connected 
5 to a telecommunication network and authentication data for 
a plurality of user interface terminals such that the user 
interface identification is bound to an associated 
authentication data for said user interface terminal. 

10 Several advantages are obtained by means of the present 

invention, since the solution provides a simple, reliable 
and controllable manner for authentication. The solution 
increases the level of security of a packet switched 
network to a level which substantially corresponds at least 
15 the level of security of a public switched telephone - 

network (PSTN) . The apparatus providing the authentication 
is under surveillance of a trusted party, such as a network 
operator (e.g. a public telephone network operator) or 
similar party who can in general be kept as a such trusted 
20 party who can sufficiently ensure the authenticity, of the 
user interfaces connected to the networks of the operator. 
The owner of the server providing the application does not 
need to know the personality of the user, but the 
application provider can rely on the fact that the operator 
25 has a trusts on the user and is therefore prepared to 
authenticate the use. The invention provides improved 
possibilities for remote working, as the authentication 
proceedings are made more reliable while the running time 
load caused by the authentication procedures to the system 
30 is decreased arid the authentication procedures as well as 

encryption key provision procedures are made more simple to 
accomplish and more transparent to the user, and while a 
good security for the connection can still be provided. 

35 In the following the present invention and the other 

objects and advantages thereof will be described in an 
exemplifying manner with reference to the annexed drawings, 
in which similar reference characters throughout the 
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various figures refer to similar features. 

RRTFF DRqrKTPTTON OP T HE! DPAWTTTOS 

5 Figure 1 is a schematic presentation of one network 

arrangement including a server operating in accordance with 
the principles of the present invention ; 

Figure 2 is a schematic presentation of a table implemented 
10 within the server of figure l; 

Figures 3 and 4 disclose flow charts for the operation of 
two embodiments of the present invention; and 

15 Figures 5 and 6 illustrate signal flows between various 
parties in two different signaling situations. 

DETATTtFP DRgPttTPTTON D P TNF HPAWTNn.q 

20 Figure 1 is a schematical presentation of an arrangement 
comprising a PSTN (Public Switched Telephone Network) to 
which a user is connected through his/hers user interface 
or terminal 1. A PSTN is a well known switched telephone 
network arrangement which is commonly used for voice and 

25 data traffic in a manner per se known by the skilled 

person, and thus not explained in more detail herein. It is 
sufficient to note that a PSTN usually contains various 
exchanges (local branch exchanges, private branch 
exchanges, central exchanges, gateway exchanges etc.) and 

30 connections (such as trunk lines) there between and 

connections or links to other networks and interfaces for 
connecting the user terminals to the PSTN. 

It is noted that the invention is not intended to be 
35 limited for use in such instances in which user interfaces 
or terminals are connected to a PSTN and thus operating 
through the PSTN network, but also other types of 
telecommunication networks capable of providing 
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communications between at least two parties could be used, 
such as various types of PLMNs (Public Land Mobile 
Networks) . In this context it is noted that two commonly 
used PLMN systems are based respectively on CDMA (Code 
Division Multiple Access) and TDMA (Time Division Multiple 
Access). For example, the IS-95 standard used in the USA is 
based on CDMA, whilst the widely used GSM standard (Global 
System for Mobile Communication) is based on TDMA. The 
future PLMNs are expected to be based on wideband solutions 
of the above, such as W- CDMA or W-TDMA. 



in the example of figure 1 the user terminal 1 consist of a 
data processing device, and more precisely of a Personal 
Computer (PC) . A PC usually comprises a Central Processor 

15 Unit (CPU), memory (ROM, RAM), a keyboard, a display, and - 
necessary interface means for connecting and interfacing 
the data processing device to the PSTN exchange apparatus, 
such as to a branch exchange 3 of figure 1, through an 
operational connection 2. These interface means may 

20 comprise e.g. a network board, appropriate connection ports 
and couplings, a modem, in case a modem connection is used, 
or the interface may be arranged by means of an ISDN 
connection (Integrated Services Digital Network) or by a 
xDSL (any Digital Subscriber Line) including an ADSL 
-25 (Asymmetric Digital Subscriber Line), or by an IDSL (ISDN 

Subscriber Line) , or by an ATM (Asynchronous Transfer Mode) 
connection for high speed access, or by any other 
corresponding solution for accessing data networks. 

30 A Network Access Server (NAS) 5 is operationally connected 
by a connection 4 to the PSTN exchange 3. In some instances 
the Access Server may also be implemented to form a part of 
the network exchange apparatus. In case the network to be 
accessed is a global packet data network utilizing TCT/IP 

35 suite and referred to as the Internet, the Access Server 
(AS) is correspondingly often referred to as Internet 
Access Server (IAS) . 
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The Network Access Server (NAS) is arranged to identify the 
telephone number to which the calling telephone 
subscription (i.e. the subscription used by PC 1) tries to 
5 establish a connection. In case the destination number is 
an Internet number, such as a number for an office network 
gateway 9 or a number for an Internet Service Provider 
(ISP) 9' beyond the Internet 8, the call will not be routed 
further to the Public Switched Telephone Network (PSTN) as 

10 an ordinary circuit switched call, but it is terminated to 
the NAS 5 and the data will then be routed via a data 
network to the Internet 8, usually in a form of data 
packets as a packet switched call. In other words, the NAS 
5 is arranged to convert the circuit switched network 

15 signal coming from the terminal 1 to data packets which can 
then be sent over to a packet switched network and to 
transmit this packet data to the Internet 8. However, 
another types of suitable Access Nodes (ANs) than the above 
described NAS are also known, and may be used instead or a 

20 NAS for providing the access from the terminal 1 to the 
Internet 8 . 

In figure 1 the applications to be accessed are illustrated 
as an office network gateway 9 or ISPs 9 1 . In case the used 

25 application is the gateway 9, the user of the PC 1 can be 
seen as working remotely, e.g. at home, and as a user who 
accesses the office network gateway 9 through an Internet 
TCP/IP connection. However, it is to be noted that the 
application requiring authentication can be any other type 

30 of application accessible through a packet data network 

than the ones illustrated, such as a service or application 
provided by some other party than by the Internet Service 
providers (ISPs) 9 1 . 

35 The arrangement comprises further an authentication node or 
authentication server, which in this example is named as a 
Domain Key Server (DKS) and is designated by 10. The 
authentication server is implemented in the interface or 
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connection point between the switched network and the 
packed data network. Thus, as disclosed by figure 1, the 
authentication server 10 is located in close relation with 
the PSTN 4, preferably such that it is having a direct 
connection with the Access Point i.e. the NAS 5 between the 
PSTN 4 and the Internet 8 . 

An authentication server contains a record or a database 
which includes all keys and/or signatures, i.e. 
authentication data, which is needed in applications 
requiring an authentication. To provide the authentication, 
the applications are arranged to use an authentication 
service provided by the authentication server 10. The 
authentication server 10 is arranged to bind or combine the 
authentication data to an identifier of the user interface 
from which the communication or call originates. This 
identifier can be e.g. a telephone subscription number 
(e.g. E. 164), an IMEI code (International Mobile Equipment 
Identity) or a SIM code (Subscriber Identity Module) , smart 
card or similar device identification designating the 
origin of an incoming call. These identifiers are also 
stored within the authentication server, as will be 
explained in more detail with reference to figure 2. 

25 An important feature of the authentication server is that 
it is implemented, run, managed, maintained and controlled 
by a trusted party, such as by a telephone network operator 
of the PSTN, or a governmental organization or a company 
providing network security services, or network services in 
general. Various organizations, such as companies, 
universities, associations etc., can also have a key server 
of they own. The server is preferably disposed physically 
within or closely adjacent to the Access Server, and such 
that no outsiders may having an access to it so that it can 
35 be trusted. 

Figure 2 discloses one example of a table implemented 
within the authentication server. The table 20 is used as a 
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record to store the necessary data / information for the 
authentication procedures. In the example the first column 
is a identification data field or a device identification 
field 22, which includes an identifier such as an E.164 
5 telephone number, a SIM (Subscriber Identification Module) 
or an IMEI (International Mobile Equipment Identity) , or a 
smart card identity. For reasons of clarity, the 
exemplifying field 22 of figure 2 shows only telephone 
numbers . 

10 

From the above the E.164 number is only an example of the 
different number addresses, E.164 being standardized by 
ITU-T (International Telecommunications Union) . Other 
corresponding telephone numbers can also, naturally, be 
15 used as an user interface identification. The SIM, in turn,- 
is usually a card or chip mounted within a mobile station, 
but corresponding identification modules can also be used 
in other terminals as well . The IMEI is an unique 
identification of a mobile station. 

20 

Some other identifiers, such as solutions based on end user 
accounts can also be used for the identification purposes. 
In addition, the type of the terminal can also be used for 
identification purposes. To give an example of the latter, 

25 the terminals could be divided e.g. into "dummy" and 

"intelligent" terminals in accordance with the operational 
principles thereof. A "dummy" terminal can be identified in 
accordance with the interface point (usually a fixed line 
connection point). An "intelligent" terminal is provided 

30 with a SIM, an IMEI, a smart card or similar, and the 
identification is based on this device instead of the 
interface point . 

The second column of the table 2 0 forms a key type field 
35 24. The type of the key may be, for instance, a public key, 
a private key, a signature, a symmetric or an asymmetric 
key . 
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The third column of the table 20 forms a field 26 for the 
name of the used cryptographic algorithm. The used 
algorithm can be, for instance, an algorithm based on a DES 
(Data Encryption Standard), or a RSA (Rivest, Shamir, 
Adleman -algorithm) or an IDEA (International Data 
Encryption Algorithm) , or any other algorithm suitable for 
the cryptographic operations possibly required in the 
authentication procedures. 

The fourth column of the table 20 forms an authentication 
data field 28 indicative of the used key / signature. As 
can be seen, the keys/signatures in the authentication data 
field 28 are bound to the respective identifiers in the 
identification data field 22 and other possible fields. It 
is to be noted that one user / identifier may have more 
than one key and/or signature which are then used in 
accordance of the requirements of the used applications. 

According to. one alternative table structure the 
identification data field 22 could be divided into 
separated fields such that the telephone number, SIM and 
IMEI, a smart card etc. each are included in a separate 
identification data field of their own. The data from the 
above separated fields could be utilized during the 
authentication procedure even such that the separated 
fields are compared to each other during the 
authentication. 

in operation, an authentication server is used for storing 
appropriate authentication data or information and device 
identification data in such a manner that the respective 
data is combined in a predetermined manner. In the 
authentication server 10 the stored authentication data can 
be used to authenticate the calling device by means of the 
device identification data or identifier (e.g. by verifying 
the calling telephone number, or the SIM or the IMEI of the 
calling device to the authentication data) . Alternatively 
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the calling device identification data can be used by the 
authentication data (e.g. by verifying the key or the 
signature to the identifier) for the authentication 
purposes. In other words, the binding of the calling device 
5 identity, i.e. user interface identification, and the 

authentication data can be accomplished in both ways, and 
thus the authenticity test can be done either by the device 
identification data (authenticity of the authentication 
data) or by the authentication data (authenticity of the 
10 device identification) . 

More precisely, and with reference to the flow chart of 
figure 3, the required keys/signatures and device 
identifiers are contained in and retrieved from the 
authentication server database or record. The arrangement 
may be such that the authentication server and the NAS are 
having keys of their own which authenticate them towards 
the other network apparatus . 

More precisely, after a need for authentication has arisen 
at step 100, the application, such as 9 or 9 1 in figure 1, 
asks in step 102 for the telephone number or other 
identifier of the calling terminal from the NAS by using 
e.g. client's IP (Internet Protocol) number. The identifier 
can also be asked from some other trusted party having the 
calling terminal identifier. However, the first solution is 
preferred especially in such cases where dynamic IPs are 
used. 

30 At step 104 the NAS sends then the requested telephone 
number or other identifier to the application, which 
transmits it further to the authentication server (DKS 10) 
at step 106. It is also possible to arrange this stage such 
that the number is sent directly from the NAS to the 

35 authentication server . The sent identifier data can 
preferably be encrypted with a public key of the 
authentication server . 
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In the authentication server the identifier data is then 
received at step 108 and bound with the authentication 
data. In case an associated authentication data is found 
and retrieved from the authentication server table at step 
108, it is returned at step 110 as a response to the 
application. At this stage the authentication data can 
preferably be encrypted with application's public key. 

After the application has received the authentication data, 
and found it to be appropriate and correct (step 112) , it 
can be used in the application proceedings at step 114. 
Thus, in case the authentication data consist of a key or 
similar, the application uses this key for the possible 
encryption operations. In case the authentication data is . 
an electronic signature, the application can e.g. compare 
it to the signature received from the user so as to get a 
confirmation that the user is the one who he/she claims to 
be, and proceed accordingly depending on whether the user 
is'confirmed or not. For instance, in case the signatures 
received from the authentication server and from the user 
match to each other the proceedings are allowed to 
continue. In case the signatures do not match, i.e. they 
are different, the application does not allow any further 
proceedings to be accomplished and may even immediately., 
disconnect the connection. An example of an application in 
which the signature can be used is electronic commerce (E- 
Commerce) in which the signature can be used. as. a 
verification of the orders so that the seller can ensure 
the user to be a real person and authorized to use the 
subscription to order the products and/or services. 

According to an embodiment illustrated by the flow chart of 
figure 4 a client sends at step 120 his/hers telephone 
number to the application, where after the application, 
such as the office gateway 9 of figure 1, asks at step 122 
the NAS to confirm that this telephone number is the 
correct one. In case the NAS confirms at step 124 the 



BNSDOCID: <WO 9956434A1 J_> 



WO 99/56434 PCT/EP99/02140 

20 

telephone number (i.e. the device identification), the 
application sends this telephone number to the 
authentication server at step 126. In case the number is 
not confirmed, the connections can be disconnected, or some 
5 other procedures, such as a retry, may follow. The 
transmission to the authentication server 10 can be 
encrypted at this stage by using the public key of the 
application 9 or the public key of the authentication 
server. The encrypting can also be accomplished by using 
10 the public key of the user contained in the authentication 
server record . 

After the authentication server has received the device 
identifier at step 128, the authentication server retrieves 

15 a corresponding key/signature and returns this as response 
to the application at step 130. As described above, this 
transmission can be crypt at step 13 2 by using the public 
key of the authentication server or the application server 
of the user. The possible encrypting/decrypting and signing 

20 operations can be accomplished, for example, in the 

Internet Access Point (i.e. NAS 5 in figure 1) or even in 
the client i.e. the user interface, or,, naturally, in the 
application itself. 

25 In case the decryption is accomplished in the Access Server 
5 of figure 1, the Access Server asks for user's private 
key from the authentication server 10. In case the 
decrypting is accomplished in the PC 1, the PC asks for the 
private key. Thus the private key is given only to the 

30 trusted parties. The public key, in turn, may be given to 
anybody who asks for it . The public key can be used only 
for crypting, whereas the private key can be used both for 
encrypting and decrypting of data. The application gives 
either its public key or a symmetric one-time or unique 

35 session key. 

To increase the security level, it is possible to use 
various tunneling techniques in the communication between 
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the application server and the NAS and authentication 
servers using per se known tunneling protocols, such as 
L2TP (Layer 2 Tunneling Protocol) or IPSEC (IP Security 
Protocol) . The transmitted data packets can also be 
encapsulated during the transmission thereof. A possibility 
is to use IPv6 protocol which enables encryption of 
headers. IPv6 protocol is a new version of the well known 
IP (Internet Protocol) . 

■It is to be noted that while figures 3 and 4 disclose a 
situation in which the user interface identification data 
is transmitted to the authentication server so as to 
receive the corresponding authentication data, the sent 
information can also be an authentication data, which the 
application has received from the Access Server or from the 
user interface . 

After sending this authentication data to the 
authentication server it receives a device identification, 
in case the authentication data was correctly announced. 
This received device identification has to match with the 
device identifier data possibly received from the Access 
Server or the user interface during the original 
communications with the user interface. 

Figures 5 and "6 disclose exemplifying flow charts for 
possible signaling between various parties .. Those messages 
which are not encrypted are designated by a dashed line and 
the encrypted messages are designated by a solid line. 

in figure 5, a connection is established and a telephone 
number is transmitted as an identifier from a telephone 
exchange to the NAS by message 50. The user interface makes 
thereafter a connection by message 51 to the application 
for the first time. The message 51 may include the 
telephone number of similar device identifier. The messages 
50 and 51 are not encrypted. 
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The application asks for the subscription number of the 
calling device or similar identifier by message 52. This 
connection may be encrypted e.g. by the public key of the 
NAS. Subsequently the NAS responds to the inquiry by 
message 53. This message may be encrypted e.g. by 
application's public key. The application asks then for the 
key of the user from the authentication server DKS by 
message 54. This message may be encrypted by the public key 
of the DKS. The DKS responds to the inquiry by message 55, 
which may be encrypted by using the public key of the 
application . 

In this embodiment even the NAS asks for the key of the 
user from the DKS by message 56. This message can be 
encrypted by the public key of the DKS. The DKS responds to 
the inquiry by message 57, which may be encrypted by the 
public key of the NAS. 

In case the user was authenticated successfully, a 
connection is established between the user interface and 
the application. As can be seen, the messages 59 between 
the user interface and the NAS are not encrypted and the 
messages 58 between the NAS and the application are, in 
turn, encrypted. The NAS is arranged to perform the 
required encryption and decryption operations, e.g. by 
retrieved keys or by a session key which has been agreed 
between the parties . 

In figure 6, a connection is established and a telephone 
number or similar is transmitted as an identifier to the 
NAS by a message 60. Then user interface takes a connection 
by message 61 to the application for the first time. As 
above, the message 61 may include the telephone number of 
similar device identifier. The messages 60 and 61 are not 
encrypted. 
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The application ask for the subscription number of the 
calling device or similar identifier by message 62. This 
connection can be encrypted e.g. by the public key of the 
HAS. Subsequently the NAS responds to the inquiry by 
message 63. This message can be encrypted e.g. by 
application's public key. The applications asks then for 
the key of the user from the authentication server DKS by 
message 64. This message may be encrypted by the public key 
of the DKS. The DKS responds to the inquiry by message 65, 
which may be encrypted by using the public key of the 
application. 

in this embodiment the user interface asks for the user 
interface number from the NAS by message 66. This message 
can be encrypted by the public key of the NAS, in case,, the 
user interface is aware of this key. The NAS responds to 
the inquiry by message 67. If necessary, this may be 
encrypted by an one time key, in case the user interface 
provided a such together with the inquiry message 66. 

After this the user interface asks for the user key from 
the DKS by message 68. This may be encrypted by the public 
key of the DKS, in case the user interface is aware of 
this. Thereafter the DKS responds to the inquiry by message 
5 69 This message may be encrypted, in case the user 
interface provided an one time key in the message 68. 

Finally, a connection is established between the user 
interface and the application. As can be seen, the «*ole 
* messaging 70 between the user interface and the application 
is encrypted. The user interface is now capable of 
performing the required encryption and decryption 
operations, e.g. by the retrieved keys or by a session key 
which has been agreed between the parties. 

35 Thus, the invention provides apparatus and methods by which 
a significant improvement can be achieved in the security 
of connections. The security in the authentication 
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procedures is improved as the authentication server 
provides an improved certainty of the keyholder (the 
identity data) and of the correctness of the authentication 
data, such as an electronic key or signature. The invention 
enables a provision of a reliable link in which a part of 
the connection is accomplished e.g. in a switched network 
and a part in a tunneled packet network. The invention 
provides good possibilities e.g. for remote working, for 
remote education or remote maintenance of patient records, 
for remote updating of databases etc., as it enables the 
user to use an asymmetric key when establishing the 
connection and then sent an one time symmetric key for the 
connection itself in case the use of the asymmetric keys 
makes the running of the process otherwise too heavy to 
15 accomplish. 

It should be noted that the foregoing examples of the 
embodiments of the invention are not intended to restrict 
the scope of the invention to the specific forms presented 
above but the present invention is meant rather to cover 
all modifications, similarities and alternatives which are 
included in the spirit and scope of the present invention, 
as defined by the appended claims. 
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1. A method of authenticating communications. in 
telecommunications networks comprising: 

storing authentication data in an authentication 

server; 

storing a user interface identification data in the 
authentication server such that it is bound with the 
associated authentication data; 

transmitting an identification data of a communicating 
user interface to the authentication server; 

receiving the identification data in the authentication 

server; 

retrieving such authentication data from the stored 
authentication data which is bound to the received 
identification data; and 

transmitting at least a part of the retrieved 
authentication data from the authentication server as a 
response to the received identification data. 

2. A method for authenticating communications in 
telecommunications networks comprising: 

storing authentication data in an authentication 

server; 

storing a user interface identification data in the 
authentication server such that it is bound with the 
associated authentication data; 

transmitting an authentication data for a communicating 
user interface to the authentication server; 

receiving the authentication data in the authentication 

server; 

retrieving such user interface identification data from 
the stored user interface identification data which is 
bound to the received authentication data; and 

transmitting at least a part of the retrieved user 
interface identification data from the authentication 
server as a response to the received authentication data. 



BNSDOCID: <WO 9956434A1_I_> 



WO 99/56434 



26 



PCT/EP99/02140 



10 



15 



20 



3. A method according to claim 1 or 2, wherein the user 
interface is communicating with an application implemented 
in a packet data network, the user interface comprising a 
data processing device and being connected to a circuit 
switched telecommunications network having an operational 
connection to the packet data network. 

4 . A method according to any of claims 1 to 3 , wherein the 
authentication data consists of an electronic key or 
signature and the user interface identification data is one 
of a telecommunications subscription number, a Subscriber 
Identification Module (SIM) , an International Mobile 
Equipment Identity (IMEI),"a smart card identity, or is a 
combination of at least two of said identifiers. 

5. A method according to any of claims 1 to 4 , wherein the 
communications between the authentication server and 
network apparatus requesting authentication is encrypted 
using public keys or private keys of the application or the 
authentication server or the user. 



6. A method according to any claims 1 to 5, wherein 
tunneling is used for the communications between the 

25 authentication server and network apparatus requesting the 
authentication. 

7 . A method according to any claims 1 to 6 , wherein a key 
received from the authentication server is used when 

30 encrypting the communications. 

8. A method according to any claims 1 to 7 , wherein a 
request for receiving the authentication data or the user 
interface identification data from the authentication 

35 server as a response to the data transmitted to the 

authentication server is sent by one of the following: 

an application the user interface is currently 
communicating with, or 
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an access server providing an access for the user 
interface from one telecommunications network to another 
telecommunications network, or 

the user interface. 

9 . A method according to any claims 1 to 8 , wherein the 
authentication server is managed and operated by a 
telephone network operator, a governmental organization, a 
private security organization or a similar organization 
providing trusted operation and management of the 
authentication server. 

10. An arrangement for use in telecommunications networks, 

comprising 

a user interface connected to a first 
telecommunications network, said user interface having an 
identification of its own, 

an application accessible through a second 
telecommunications network, 

an access server enabling the user interface to access 
the second telecommunications network through the first 
telecommunications network, and 

an authentication server, wherein the authentication 
server comprises a record or a database in which the 
identification of the user interface and a corresponding 
authentication data are stored in a retrievable manner and 
such that they are bound together. 

11 An arrangement according to claim 10, wherein the first 
telecommunications network is a circuit switched telephone 
network and the user interface comprises a data processing 
device, and the second telecommunications network is a 
packet data network operationally connected to said first 
network, and wherein the authentication server is arranged 
to have a direct connection with the access server between 
said first and second networks. 
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12. An arrangement according to claim 10 or 11, wherein the 
authentication server contains a table having a field for 
the authentication data in form of an electronic key or a 
signature and a field for the identification data in form 
5 of a telephone subscription number or a Subscriber 

Identification Module (SIM) or an International Mobile 
Equipment Identity (IMEI) or a smart card identity or 
similar means for providing identity. 

10 13 . An arrangement according to any of claims 10 to 12 , 
wherein the application is a gateway to a local area 
network, such as to an office network. 

14. An arrangement according to any of claims 10 to 13 , 

15 wherein the second telecommunications network is accessed 
through an Access Server arranged to terminate a circuit 
switched call and to convert the communications into packet 
data so as to enable communications in a packet data 
network . 

20 

15. An arrangement according to any of claims 10 to 14, 
wherein the authentication server is implemented in an 
access point between the first telecommunications network 
and the second telecommunications network . 

25 

16. An arrangement according to any of claims 10 to 15, 
wherein at least a part of the communications between the 
authentication server and the other parties of the 
communications is encrypted and/or tunneled . 

30 

17. An arrangement according to any of claims 10 to 16, 
wherein the authentication server is managed and run by a 
telephone network operator, a governmental organization, a 
private security organization or a similar organization 

35 providing trusted operation and management of the 
authentication server . 



BNSDOC10: <WO_ 



_9956434A1_!_> 



-5 



PCT/EP99/02140 

WO 99/56434 

29 

18. An authentication server for use in telecommunications 
networks, comprising a database or record for storing a 
user interface identification data for a user interface 
terminal connected to a telecommunication network and 
authentication data for a plurality of user interface 
terminals such that the user interface identification is 
bound to an associated authentication data for said user 
interface terminal . 

10 19 An authentication server according to claim 18, wherein 
the server is implemented to have a direct connection with 
an access server of a circuit switched telephone network to 
which the user interface terminal is connected, the user 
. interface terminal comprising a data processing device, and 

,5 wherein a packet data network is operationally connected to. 
said circuit switched telephone network through said access 
server, and wherein an application is provided via said 
packet data network. 

,0 20. An authentication server according to claim 18 or 19, 

wherein the authentication server contains a table having a 
field for the authentication data in form- of an electronic 
key or a signature and a field for the identification data 
in form of a telephone subscription number or a Subscriber 
Identification Module (SIM) or an International Mobile 
Equipment Identity (IMEI) or a smart card identity or 
similar means for providing identity. 

21 An authentication server according to claim 19 or 20, 
wherein the authentication server is implemented m an 
access point between the circuit switched telephone network 
and the packet data network. 

22. An authentication server according to any of claims 18 
to 21, wherein at least a part of the communications 
between the authentication server and the other parties of 
the communications is arranged to be encrypted and/or 
tunneled. 
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23. An authentication server according to any of claims 18 
to 22, wherein the authentication server is managed and ru 
by a telephone network operator, a governmental 
organization, a private security organization or a similar 
organization providing trusted operation and management of 
the authentication server. 
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A need for an authentication in communication 
between a user interface and an application arises 



i 



The application asks for an identifier of the user 
interface from an access server 



The identifier is transmitted as response to 
the application 



The application sends the identifier 
to an authentication server 



The authentication server receives the identifier 
and retrieves from a table a corresponding 
authentication data 
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The authentication data is transmitted 
as response to the application 
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In case the authentication data is found to be 
correct, the user interface is allowed to continue 
the proceedings in the application 
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The authentication data is used in further 
proceedings of the communications 
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Fig. 3 
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' A user interface sends its telephone number or other identifi- 
cation to an application as an identifier of the user interface 
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identifier to an authentication server 
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authentication data 




f : : ■ rrr—, 1 


-TRTauthentication data is encrypLed d..U Ld.wn.uea 
as response to the application 


\ 


r -— 


The application decrypts the transmission 


132 
134 




7 . . T 


The'authentication data is utilized in lu.ll.er proceedings 
of the application 



Fig. 4 



BNSDOCID: <WO 9956434A1J_> 



WO 99/56434 



4/4 



PCT/EP99/02140 



User 

Interface Exchange 



59 + 



NAS 



OKS 



Application 



J 50 




<4 ■ 










► 




— ► 

56 

57 


- » 

* . 


* — 




— frn 

Fig. 5 



51 
52 
53 
54 
55 



58 



User 

Interface Exchange 



66 

67 
68 
69 



NAS 



DKS 



Application 







60 






»» 


* 










» 























fr» 














» 



61 
62 
63 
64 

65 



70 



Fig. 6 



BNSDOCID: <WO 9956434A1J_> 



INTERNATIONAL SEARCH REPORT 



Inte. onal Application No 

PCT/EP 99/02140 



tpC LA 6 aF,C H04L12^ ECTM 1^L29/06 

I Patent Cla ssific ation (IPC) or to both national das sitication and IPC 
searched 

TPC~6~""H04L H04Q 



According to International I 

B. FIELDS SE ARCHED 

Minimum documentation searched (dassitication system followed by dassiticatton symbols) 



Bectronic data base consulted during the interna tional search (name o, data base and. where pracca, search terms used, 



| C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category ; 

x 



Citation ot document, .with indication, where appropriate, of the relevant passages 

EP 0 367 361 A (GTE MOBILNET INC) 
9 May 1990 (1990-05-09) 
abstract 

page 2, column 2, line 49 - page 3, 
column 3, line 31 
page 7, column 11, line 50 - page 9, 
column 15, line 40 

US 5 297 189 A (CHABERNAUD CHRISTIAN) 
22 March 1994 (1994-03-22) 
abstract 

column 2, line 15 - column 4, line 15 
column 6, line 52 - line 55 
column 7, line 63 - column 8, line 4 
figures 1,2 

-/-- 



Relevant to claim No. 



1,4 



2,4,8, 
18,20,21 



12 



ru 



Further documents are listed in the continuation of box C. 



Patent family members are listed in annex. 



» Special categories of cited documents : 

•A" document defining the general state ot the art which is not 

considered to be of particular relevance 
-E" earlier document but published on or after the international 

filing date 

"i- document which may throw doubts on priority claim(s)or 
w^ch is died to establish the publication date of another 
citation or other special reason (as specified) 
•©- document referring to an oral disclosure, use, exhibition or 
other means 



T later document published after the Wemational filira date 
or priority date and not in conflict with the application but 
cited to understand the principle or theory underlying the 
invention 

-X" document of particular relevance; the claimed jnyortton 
cannot be considered novel or cannot be considered to 
involve an inventive step when the document is taken alone 

"Y" document ot particular relevance; the claimed inwi|«on 

cannot be considered to involve an inventive . step ^when the 
document is combined with one or ™re othar 6^dwi- 
ments, such combination being obvious to a person skilled 
in the art. 

document member of the same patent family 



1 later than the pnorrty date aaimea 

1 Date of the actual completion ot the international search 


Date of mailing ot the international search report I 


12 August 1999 


20/08/1999 


(Name and mailing address ot the ISA 

1 European Patent Office, P.B. 581 8 Patentlaan 2 
I NL - 2280 HV Rijswijk 
I Tel. (+31-70) 340-2040, Tx. 31 651 epo nl, 
| Fax: (+31-70) 340-3016 


Authorized officer i 

Poggio, F j 


Form PCT7ISA/210 (second sheet) (July 1992) 


page 1 of 2 



BNSDOCID: <WO_ 



_9956434A1_I_> 



INTERNATIONAL SEARCH REPORT 



Inte ional Appltcation No 

PCT/EP 99/02140 



C.<Continuation) DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 3 Citation of document, with* indication,where appropriate, of the relevant passages 



Relevant to claim No, 



WO 96 13113 A (SECURE COMPUTING CORP) 
2 May 1996 (1996-05-02) 
abstract 

page 9, line 15 - page 11, line 15 
page 15, line 16 - page 19, line 9 

EP 0 738 095 A ( IBM) 
16 October 1996 (1996-10-16) 
abstract 

page 7, column 9, line 40 - page 9, 
column 13, line 38 
page 17, column 30, line 37 - line 47 
figure 4 



10,13, 
15,18,22 



3,11,19 



Foim PCT/ISA/210 (continuation of second sheet) (Jufy 1998) 



BNSDOCID: <WO_ 



_9956434A1_I > 



page 2 of 2 



INTERNATIONAL SEARCH REPORT 

information on patent family members 



Patent document 
cited in search report 



Inte tonal Application No 

PCT/EP 99/02140 



Publication 
date 



Patent family 
member(s) 



Publication 
date 



EP 0367361 



US 5297189 



WO 9613113 



EP 0738095 



09-05-1990 



22-03-1994 



02-05-1996 



16-10-1996 



US 
CA 



FR 
CA 
EP 
FI 



US 
AU 
EP 



US 
JP 



4958368 A 
2001857 A 



2662880 A 
2043292 A 
0459337 A 
912550 A 



5864683 A 
3888595 A 
0787397 A 



5659596 A 
8322081 A 



18-09-1990 
30-04-1990 



06-12-1991 
01-12-1991 
04-12-1991 
01-12-1991 



26-01-1999 
15-05-1996 
06-08-1997 



19-08-1997 
03-12-1996 



Foim PCT/ISA/210 (palcm family anrwx) (July 1992) 
. <WO 99S6434A1J_> 



] 

IMS RA6E BLANK (mspto) 



